Chega uma carta de papel, com jeitão oficial, que traz um QR code. Ao escanear, tu cai num malware que rouba banco (um trojan) ou numa página falsa de carteira de cripto. O golpe abusa da confiança que a gente na Suíça tem no correio físico e no QR code (o país passou o e-banking e as faturas pro QR-bill) e imita órgãos federais reais, como a MeteoSwiss.

Como o golpe funciona

1. Chega uma carta impressa com jeitão oficial (por exemplo, com a marca da MeteoSwiss / Instituto Federal de Meteorologia, ou uma 'atualização' de carteira de cripto).
2. Ela manda tu escanear um QR code pra instalar um 'app de alerta de tempo severo' ou uma 'atualização urgente da carteira'.
3. Escanear leva a um malware (o 'Coper', um trojan bancário Android) ou a um site de phishing.
4. O malware imita mais de 380 apps pra roubar tuas credenciais de e-banking; a variante da carteira pede a tua frase de recuperação (seed).
5. As credenciais ou seeds roubadas são usadas pra esvaziar tua conta bancária ou de cripto.

Sinais de alerta

• Uma carta de papel te apressando a escanear um QR code pra instalar um app ou 'atualizar' algo com urgência.
• Pedido pra digitar teu login de e-banking ou a frase de recuperação/seed de cripto depois de escanear.
• Apps oferecidos fora da App Store / Google Play oficiais.
• Um remetente com cara de oficial que tu não esperavas que te contatasse por QR code.

Como se proteger

• Nunca instales apps a partir de um QR code numa carta; usa só as lojas de apps oficiais.
• Nenhum serviço legítimo precisa da tua seed de cripto ou do teu login completo de e-banking por um link escaneado.
• Confere cartas 'oficiais' incomuns contatando o órgão pelo site conhecido dele.
• Denuncia a carta ao NCSC/BACS.

Es kommt ein Brief auf Papier, offiziell aussehend, mit einem QR-Code. Beim Scannen landest Du bei einer Banking-Malware (einem Trojaner) oder einer gefälschten Krypto-Wallet-Seite. Der Betrug missbraucht das Vertrauen, das wir in der Schweiz in die Briefpost und den QR-Code haben (das Land hat E-Banking und Rechnungen auf QR-Rechnung umgestellt), und ahmt echte Bundesstellen wie MeteoSchweiz nach.

So funktioniert die Masche

1. Es kommt ein gedruckter Brief, offiziell aussehend (zum Beispiel mit dem Logo von MeteoSchweiz / dem Bundesamt für Meteorologie, oder als 'Update' einer Krypto-Wallet).
2. Er fordert Dich auf, einen QR-Code zu scannen, um eine 'Unwetterwarn-App' oder ein 'dringendes Wallet-Update' zu installieren.
3. Das Scannen führt zu einer Malware (dem 'Coper', einem Android-Banking-Trojaner) oder zu einer Phishing-Seite.
4. Die Malware ahmt über 380 Apps nach, um Deine E-Banking-Zugangsdaten zu stehlen; die Wallet-Variante fragt nach Deiner Wiederherstellungsphrase (Seed).
5. Die gestohlenen Zugangsdaten oder Seeds werden benutzt, um Dein Bank- oder Krypto-Konto leerzuräumen.

Warnsignale

• Ein Brief auf Papier, der Dich drängt, einen QR-Code zu scannen, um dringend eine App zu installieren oder etwas zu 'aktualisieren'.
• Die Bitte, nach dem Scannen Deine E-Banking-Zugangsdaten oder Deine Krypto-Wiederherstellungs-/Seed-Phrase einzugeben.
• Apps, die ausserhalb des offiziellen App Store / Google Play angeboten werden.
• Ein offiziell aussehender Absender, von dem Du keinen Kontakt per QR-Code erwartet hast.

So schützt du dich

• Installiere nie Apps über einen QR-Code in einem Brief; nutze nur die offiziellen App-Stores.
• Kein seriöser Dienst braucht Deine Krypto-Seed oder Dein vollständiges E-Banking-Login über einen gescannten Link.
• Prüf ungewöhnliche 'offizielle' Briefe, indem Du die Stelle über ihre bekannte Website kontaktierst.
• Melde den Brief ans NCSC/BACS.

A paper letter arrives, looking official, carrying a QR code. Scanning it lands you on banking malware (a trojan) or a fake crypto-wallet page. The scam abuses the trust we in Switzerland place in physical post and QR codes (the country moved e-banking and billing to the QR-bill) and imitates real federal bodies like MeteoSwiss.

How the scam works

1. A printed letter arrives, looking official (for example branded MeteoSwiss / Federal Office of Meteorology, or a crypto-wallet 'update').
2. It tells you to scan a QR code to install a 'severe-weather warning app' or an 'urgent wallet update'.
3. Scanning leads to malware (the 'Coper', an Android banking trojan) or a phishing site.
4. The malware mimics over 380 apps to steal your e-banking credentials; the wallet variant asks for your recovery (seed) phrase.
5. The stolen credentials or seeds are used to drain your bank or crypto account.

Warning signs

• A paper letter rushing you to scan a QR code to install an app or 'update' something urgently.
• A request to enter your e-banking login or crypto recovery/seed phrase after scanning.
• Apps offered outside the official App Store / Google Play.
• An official-looking sender you didn't expect to contact you by QR code.

How to protect yourself

• Never install apps from a QR code in a letter; use only the official app stores.
• No legitimate service needs your crypto seed or your full e-banking login via a scanned link.
• Check unusual 'official' letters by contacting the body through its known website.
• Report the letter to the NCSC/BACS.

Llega una carta de papel, con aspecto oficial, que trae un código QR. Al escanearlo caes en un malware que roba banca (un troyano) o en una página falsa de monedero cripto. La estafa abusa de la confianza que en Suiza tenemos en el correo físico y en los códigos QR (el país pasó la banca electrónica y las facturas al QR-bill) e imita a organismos federales reales como MeteoSwiss.

Cómo funciona la estafa

1. A printed letter arrives, looking official (for example branded MeteoSwiss / Federal Office of Meteorology, or a crypto-wallet 'update').
2. It tells you to scan a QR code to install a 'severe-weather warning app' or an 'urgent wallet update'.
3. Scanning leads to malware (the 'Coper', an Android banking trojan) or a phishing site.
4. The malware mimics over 380 apps to steal your e-banking credentials; the wallet variant asks for your recovery (seed) phrase.
5. The stolen credentials or seeds are used to drain your bank or crypto account.

Señales de alerta

• A paper letter rushing you to scan a QR code to install an app or 'update' something urgently.
• A request to enter your e-banking login or crypto recovery/seed phrase after scanning.
• Apps offered outside the official App Store / Google Play.
• An official-looking sender you didn't expect to contact you by QR code.

Cómo protegerte

• Never install apps from a QR code in a letter; use only the official app stores.
• No legitimate service needs your crypto seed or your full e-banking login via a scanned link.
• Check unusual 'official' letters by contacting the body through its known website.
• Report the letter to the NCSC/BACS.

Une lettre en papier arrive, d'allure officielle, portant un QR code. En le scannant tu tombes sur un malware bancaire (un cheval de Troie) ou une fausse page de portefeuille crypto. L'arnaque abuse de la confiance qu'on a en Suisse dans le courrier physique et les QR codes (le pays a fait passer l'e-banking et les factures au QR-bill) et imite de vrais organismes fédéraux comme MétéoSuisse.

Comment l'arnaque fonctionne

1. A printed letter arrives, looking official (for example branded MeteoSwiss / Federal Office of Meteorology, or a crypto-wallet 'update').
2. It tells you to scan a QR code to install a 'severe-weather warning app' or an 'urgent wallet update'.
3. Scanning leads to malware (the 'Coper', an Android banking trojan) or a phishing site.
4. The malware mimics over 380 apps to steal your e-banking credentials; the wallet variant asks for your recovery (seed) phrase.
5. The stolen credentials or seeds are used to drain your bank or crypto account.

Signaux d'alerte

• A paper letter rushing you to scan a QR code to install an app or 'update' something urgently.
• A request to enter your e-banking login or crypto recovery/seed phrase after scanning.
• Apps offered outside the official App Store / Google Play.
• An official-looking sender you didn't expect to contact you by QR code.

Comment te protéger

• Never install apps from a QR code in a letter; use only the official app stores.
• No legitimate service needs your crypto seed or your full e-banking login via a scanned link.
• Check unusual 'official' letters by contacting the body through its known website.
• Report the letter to the NCSC/BACS.

Arriva una lettera di carta, dall'aria ufficiale, con un QR code. Scansionandolo finisci su un malware che ruba i dati bancari (un trojan) o su una falsa pagina di wallet cripto. La truffa abusa della fiducia che in Svizzera riponiamo nella posta fisica e nei QR code (il paese ha spostato l'e-banking e le fatture sul QR-bill) e imita enti federali reali come MeteoSvizzera.

Come funziona la truffa

1. A printed letter arrives, looking official (for example branded MeteoSwiss / Federal Office of Meteorology, or a crypto-wallet 'update').
2. It tells you to scan a QR code to install a 'severe-weather warning app' or an 'urgent wallet update'.
3. Scanning leads to malware (the 'Coper', an Android banking trojan) or a phishing site.
4. The malware mimics over 380 apps to steal your e-banking credentials; the wallet variant asks for your recovery (seed) phrase.
5. The stolen credentials or seeds are used to drain your bank or crypto account.

Segnali d'allarme

• A paper letter rushing you to scan a QR code to install an app or 'update' something urgently.
• A request to enter your e-banking login or crypto recovery/seed phrase after scanning.
• Apps offered outside the official App Store / Google Play.
• An official-looking sender you didn't expect to contact you by QR code.

Come proteggerti

• Never install apps from a QR code in a letter; use only the official app stores.
• No legitimate service needs your crypto seed or your full e-banking login via a scanned link.
• Check unusual 'official' letters by contacting the body through its known website.
• Report the letter to the NCSC/BACS.